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In the Claims 

Claims are amended as follows: 



1 to 19. (cancelled) 



20. (new) A communication system comprising: 

a plurality of virtual private networks (VPNs) interconnected by a first data 

network; 

a second data network connected to the plurality of VPNs via the first data 
network, the second data network using a network addressing scheme that is different to a 
network addressing scheme used by at least one of said plurality of VPNs; and 

a VPN media proxy interfacing the first and second data networks, the VPN 
media proxy being configured to pass information from a source address in said at least 
one of said plurality of VPNs to a destination address in said second data network, the VPN 
media proxy having an address translator arranged to translate the destination address of 
the information in accordance with the network addressing scheme of the second data 
network, and to send the information towards the translated destination address in the 
second data network. 

21. (new) The communication system as claimed in claim 20, wherein the address 
translator is arranged to translate a destination address of information being transmitted 
from a source address in the second data network to a destination address in said at least 
one of said plurality of VPNs in accordance with the network addressing scheme of said at 
least one of said plurality of VPNs, and to send the information towards the translated 
destination address in said at least one of said plurality of VPNs. 

22. (new) The communication system as claimed in claim 21, wherein the first data 
network is a public data network using a public Internet Protocol (IP) network addressing 
scheme, the second data network Is a carrier data network using a private IP network 
addressing scheme and one or more of said plurality of VPNs uses a private IP network 
addressing scheme. 
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23. (new) The communication system as claimed in claim 22, wherein, where more than 
one of the VPNs use a private IP network addressing schemes, some of said private IP 
network addressing schemes have overlapping address ranges. 

24. (new) The communication system as claimed in claim 22, wherein the carrier data 
network interfaces the public data network to a switched telephone network (STN) via a 
trunk gateway whose carrier data network IP address is the destination address for 
information being transmitted from a source address in any of the VPNs to a destination 
address in the carrier data network. 

25. (new) The communication system as claimed in claim 24, wherein tire STN is a public 
STN (PSTN). 

26. (new) The communication system as claimed in claim 24, further comprising a VPN 
gateway Interfacing the public and carrier data networks, the VPN gateway being 
configured to transmit caR signaling information between said at least one of said plurality of 
VPNs and the carrier data network via the public data network and the VPN media proxy 
being configured to transmit bearer information comprising a call between said at least one 
of said plurality of VPNs and the carrier data network via the public data network once a call 
has been established in response to sard transmission of call signaling information, the 
address translator of the VPN media proxy being configured to translate a destination 
address of said bearer information to the carrier data network IP address of the trunk 
gateway. 

27. (new) The communication system of claim 26, wherein the call signaling comprises 
voice over IP (VoIP) call signaling and the call comprises a VoIP call. 

28. (new) The communication system as claimed in claim 22, wherein the VPN media 
proxy is configured to provide a virtual routing function to each VPN, each virtual routing 
function using a private IP network addressing scheme of its respective VPN. 
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29. (new) The communication system as claimed in claim 28, wherein the address 
translator of the VPN media proxy is configured to provide a network address translation 
function to each of the virtual routing functions. 

30. (new) A method of address translation in a communication system comprising a 
plurality of virtual private networks (VPNs) interconnected by a first data network; a second 
data network connected to the plurality of VPNs via the first data network, the second data 
network using a network addressing scheme that is different to a network addressing 
scheme used by at least one of said plurality of VPNs; and a VPN media proxy interfacing 
the first and second data networks, the method comprising: 

passing information via the VPN media proxy from a source address in said 
at least one of said plurality of VPNs to a destination address in said second data network; 

at an address translator of the VPN media proxy, translating the destination 
address of the information in accordance with the network addressing scheme of the 
second data network, and 

sending the information towards the translated destination address in the 
second data network. 

31 . (new) The method as claimed in claim 30, wherein the address translator translates a 
destination address of information being transmitted from a source address in the second 
data network to a destination address in said at least one of said plurality of VPNs in 
accordance with the network addressing scheme of said at least one of said plurality of 
VPNs, and sends the information towards the translated destination address in said at least 
one of said plurality of VPNs. 

32. (new) The method as claimed in claim 31, wherein the VPN media proxy provides a 
virtual routing function to each VPN, each virtual routing function using a private IP network 
addressing scheme of its respective VPN, 

33. (new) The method as claimed in claim 32, wherein the address translator of the VPN 
media proxy provides a network address translation function to each of the virtual routing 
functions. 
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34. (new) The method as claimed in claim 31 r wherein the first data network is a public 
data network using a public Internet Protocol (IP) network addressing scheme, the second 
data network is a carrier data network using a private IP network addressing scheme and 
one or more of said plurality of VPNs uses a private IP network addressing scheme. 

35. (new) The method as claimed in claim 31 , wherein, where more than one of the VPNs 
use a private IP network addressing schemes, some of said private IP network addressing 
schemes have overlapping address ranges. 

36. (new) The method as claimed in claim 31, wherein the carrier data network interfaces 
the public data network to a switched telephone network (STN) via a trunk gateway whose 
carrier data network IP address is the destination address for information being transmitted 
from a source address in any of the VPNs to a destination address in the carrier data 
network. 

37. (new) The method as claimed in claim 36, wherein the STN is a public STN (PSTN). 

38. (new) The method as claimed in claim 36. wherein the communication system further 
comprises a VPN gateway interfacing the public and carrier data networks, the VPN 
gateway transmitting voice over IP (VoIP) call signaling information between said at least 
one of said plurality of VPNs and the earner data network via the public data network and 
the VPN media proxy transmitting bearer Information comprising a VoIP call between said 
at least one of said plurality of VPNs and the carrier data network via the public data 
network once a VoIP call has been established in response to said transmission of VoIP call 
signaling information, the address translator of the VPN media proxy translating a 
destination address of said bearer information to the carrier data network IP address of the 
trunk gateway. 

39. (new) A virtual private network VPN' media proxy for a communication system 
comprising a plurality of virtual private networks (VPNs) interconnected by a first data 
network and a second data network connected to the plurality of VPNs via the first data 
network, the second data network using a network addressing scheme that is different to a 
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network addressing scheme used by at least one of said plurality of VPNs; the VPN media 
proxy comprising: 

a first interface for interfacing with the first data network; 
a second interface for interfacing with the second data network; and 
information passing means configured to pass information from a source 
address in said at least one of said plurality of VPNs to a destination address in said second 
data network, said information passing means comprising an address translator for 
translating the destination address of the information in accordance with the network 
addressing scheme of the second data network and sending the information towards the 
translated destination address in the second data network. 

40. (new) The VPN media proxy as claimed in claim 39, wherein the address translator is 
arranged to translate a destination address of information being transmitted from a source 
address in the second data network to a destination address in said at least one of said 
plurality of VPNs in accordance with the network addressing scheme of said at least one of 
said plurality of VPNs, and to send the information towards the translated destination 
address in said at least one of said plurality of VPNs. 

41 . (new) The VPN media proxy as claimed in claim 40, wherein the VPN media proxy is 
configured to provide a virtual routing function to each VPN, each virtual routing function 
using a private IP network addressing scheme of its respective VPN. 

42. (new) The VPN media proxy as claimed in claim 41, wherein the address translator of 
the VPN media proxy is configured to provide a network address translation function to 
each of the virtual routing functions, 

43. (new) The VPN media proxy as claimed in claim 40, wherein the first data network is a 
puWic data network using a public Internet Protocol (IP) network addressing scheme, the 
second data network is a carrier data network using a private IP network addressing 
scheme and one or more of said plurality of VPNs uses a private IP network addressing 
scheme, the carrier data network interfaces the public data network to a switched telephone 
network (STN) via a trunk gateway whose carrier data network IP address is the destination 
address for information being transmitted from a source address in any of the VPNs to a 
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destination address in the carrier data network, a VPN gateway is provided to interface the 
public and carrier data networks and to transmit voice over IP (VoIP) call signaling 
information between said at least one of said plurality of VPNs and the carrier data network 
via the public data network and wherein the information passing means is configured to 
transmit bearer information comprising a VoIP call between said at least one of said 
plurality of VPNs and the carrier data network via the public data network once a VoIP call 
has been established In response to said transmission of VoIP call signaling information, 
the address translator being configured to translate a destination address of said bearer 
information to the carrier data network IP address of the trunk gateway. 

44. (new) The VPN media proxy as claimed in claim 33 f wherein, where more than one of 
the VPNs use a private IP network addressing schemes, some of said private IP network 
addressing schemes have overlapping address ranges. 

45. (new) The VPN media proxy as claimed in claim 43. wherein the STN is a public STN 
(PSTN). 

46. (new) The VPN media proxy as claimed in claim 40, further comprising a configuration 
store for storing configuration information comprising source and destinations addresses for 
Information being transmitted between an entity In one of said plurality of VPNs and an 
entity in said second data network, wherein said configuration information includes 
information associating said source and destination addresses with respective target 
addresses, said target addresses comprising the translated destination addresses in said 
one of said plurality of VPNs and said second data network. 

47. (new) A computer readable medium storing computer readable instructions which, 
when executed by a processor of a computing device, cause said computing device to 
Implement, In a communication system comprising a plurality of virtual private networks 
(VPNs) interconnected by a first data network; a second data network connected to the 
plurality of VPNs via the first data network, the second data network using a network 
addressing scheme that is different to a network addressing scheme used by at least one of 
said plurality of VPNs; and a VPN media proxy interfacing the first and second data 
networks, the steps of: 
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passing information via the VPN media proxy from a source address in said 
at least one of said plurality of VPNs to a destination address in said second data network; 

at an address translator of the VPN media proxy, translating the destination 
address of the information in accordance with the network addressing scheme of the 
second data network, and 

sending the information towards the translated destination address in the 
second data network. 
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